[Open-scap] need help using openscap

Steve Grubb sgrubb at redhat.com
Wed Aug 3 20:48:52 UTC 2011


On Wednesday, August 03, 2011 02:30:13 PM Derek Warner wrote:
> Is there any documentation to assist me in using openscap?
 
There should be some info here:

 http://www.open-scap.org/page/Documentation

 
> I tried to download the uscgb redhat scap content and couldn't get it
> working with oscap.

Well, that is a known problem for a couple reasons. The USGCB content is written to 
SCAP 1.1 and the scanner on RHEL 5 handles SCAP 1.0 + OVAL 5.7. However, there are 
only 2 or 3 lines that do not work and you can remove them from the content.

Also, the content that is posted is a draft that is out for public comment and 
feedback. It has some bugs in it. We are helping to correct the problems and hopefully 
a newer XCCDF file will be available. It won't fix the SCAP 1.0 vs 1.1 issue. But if you 
comment out the right checks, it will otherwise run.

-Steve




More information about the Open-scap-list mailing list